Grow, keep, and prove revenue from the customers you already have. Ambassador is the Customer Lifecycle Operating System, orchestrated by HiroAI.
Summary from the company’s website.
Publicly advertised compliance posture
As observed on September 8, 2026 on the organization’s public trust center.
-
SOC 2
Independent CPA audit of controls for security, availability, and confidentiality.
-
PCI DSS
Payment card industry standard for handling cardholder data securely.
-
GDPR
Public claim of alignment with the EU General Data Protection Regulation.
-
CCPA
Publicly advertised on the organization’s trust center.
Compliance timeline
-
September 8, 2026
Posture last observed by Trust Index
Subprocessors
Third parties Getambassador discloses on its trust center. Linked entries have their own profile in the Trust Index.
78% chain trust: 18 of 23 disclosed subprocessors are themselves in the Trust Index.
- Amazon Web Services Cloud services provider
- Auth0 Identity provider
- Cloudflare DNS, CDN, Networking, and Security
- Google Cloud Platform Data warehouse and backups
- Files.com File transfer
- FullStory Support monitoring
- Google Office Suite
- PagerDuty Service alerts
- Twilio & SendGrid Email sending
- Sentry Error Logging
- Tray.io Automation and integration
- Zapier Integration and automation
- Tango (Blackhawk Network) Issue rewards
- OpenAI Engineering
- Entri Streamline the subdomain setup process for Ambassador clients
- Sonobi (Lamark Media Group, LLC) Programmatic advertising
- Anthropic AI assistant tooling used internally by staff that may process program and customer data
- Hubspot Bidirectional CRM sync of contacts and referral/reward activity with the client's HubSpot, plus Ambassador's own CS operations
- Shopify E-commerce integration; ingests orders and customers to attribute referrals and issue rewards for Shopify stores
- WooCommerce E-commerce integration; ingests orders and customers to attribute referrals and issue rewards for WooCommerce stores
- Stripe Payment processing, advocate reward payouts, company wallet funding, and referral attribution
- Sendoso Corporate gifting / direct-mail fulfillment of rewards on behalf of clients
- Salesforce Bidirectional referral-program sync with the client's Salesforce (advocates, referees, commissions, campaigns)
About this data
The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.
